Information Security Manager

- Location: Chennai / Hybrid
- Experience: 12–15 years
- Employment Type: Full time
- Salary: 14-15 LPA

About the Role

We are looking for an experienced Information Security leader to own and strengthen the organisation's Information Security programme in India and ensure alignment with global security frameworks.

The role will oversee security governance, risk management, compliance, security operations, incident response, data protection, third-party security, and security awareness. The individual will work closely with global Information Security, Technology, Engineering, Product, Legal, Privacy, Clinical and Business teams.

Key Responsibilities

- Own the Information Security programme for the India business and develop India-specific policies, standards, procedures and controls.
- Establish the security roadmap based on business priorities and risk exposure.
- Maintain the security risk register, remediation plans, risk ownership and escalation mechanisms.
- Provide regular security updates, risk reporting and recommendations to senior leadership.
- Act as the primary Information Security point of contact for India with global counterparts.
- Coordinate global security standards, governance activities, reviews, audits and remediation actions.
- Lead and manage the India Information Security team, including priorities, objectives, responsibilities, performance and development.
- Build team capabilities through training, certifications and exposure to emerging security practices.
- Lead or co-lead audits and assessments covering ISO 27001, SOC 2, HIPAA and applicable Indian data protection requirements.
- Coordinate evidence collection, auditor interactions, findings and remediation through closure.
- Oversee security monitoring, incident management, vulnerability management, penetration testing and remediation tracking.




- Lead the India response to significant security incidents and coordinate with global teams where required.
- Partner with IT and Engineering on endpoint, network, patching, secure configuration and application security controls.
- Work with Engineering and Product teams to incorporate security into architecture and development processes.
- Review security controls across cloud environments, applications, APIs and integrations.
- Provide oversight of IAM, privileged access, secrets management, logging, monitoring and periodic access reviews.
- Review security implications of new products, technologies and significant business changes.
- Own the security assessment process for vendors, partners and service providers.
- Partner with Procurement, Legal and business teams on security requirements during vendor onboarding and contracting.
- Oversee customer and partner security questionnaires and due-diligence requirements.
- Drive security awareness, phishing-awareness initiatives and security exercises across India.

Experience & Qualifications

- Bachelor's or master's degree in Information Security, Cybersecurity, Computer Science, IT or a related field.
- 12–15 years of relevant Information Security/Cybersecurity experience.
- Demonstrated experience leading or owning an enterprise Information Security programme.
- Experience managing Information Security teams.
- Strong experience with ISO 27001, SOC 2 and HIPAA.
- Strong understanding of risk management, security governance, IAM, cloud security, vulnerability management and incident response.
- Experience working with US-based security, technology and business teams.
- Experience managing external auditors, customers, partners and security assessments.
- Healthcare or health-tech experience will be highly preferred.
- Experience with AWS, Azure or GCP preferred.
- Certifications such as CISSP, CISM, CISA, CCSP or ISO 27001 Lead Auditor/Implementer preferred.

📌 Information Security Manager (Chennai)
🏢 Openhire
📍 Chennai